AMENDMENTS TO THE CLAIMS 

1. (Currently Amended) An anonymous electronic voting system comprising: 
voter terminals (100, 110, HO) for receiving a list of combinations of 

candidate name and encrypted candidate name, to transmit said encrypted 
candidate name of a selected candidate via a network; 

at least one encryption server ( 4 00, 4 10, 44 0) for receiving and re- 
encrypting said encrypted candidate name to create encrypted voting data, and 
returning said encrypted voting data to said voter terminal (100, 110, 1 4 0) having 
transmitted said encrypted candidate name; 

a voting server (200) for receiving said encrypted voting data from said 
voter terminal (100, 1 10, 1 4 0) to create a list of effective encrypted voting data 
from among said received encrypted voting data, and transmitting said created 
list of said effective encrypted voting data via said network; and 

a decryption server (500) for decrypting said list of said effective 
encrypted voting data received from said voting server (200) , to create and 
transmit via said network a list of plaintext candidate names rearranged from said 
list of said effective encrypted voting data, 

wherein said voting server (200) receives said list of said plaintext 
candidate names from said decryption server~f§#0)^, to tally vote results based on 
said list of said received candidate names, 

2. (Currently Amended) The anonymous electronic voting system according 
to claim 1, further comprising another voter terminal (120, 130, 150) including 

DOCSNY-206555v01 



an encryption means (121, 134, 151) for encrypting a candidate name of a 
selected candidate to create an encrypted candidate name. 
3-5. (Canceled) 

6. (Currently Amended) The anonymous electronic voting system according 
to claim 1-ef- ^. further comprising an authentication server , wherein: 

e ach of said combinations in said list includes, in addition to said 
candidat e nam e and said encrypt e d candidate nam e , certificate data for c e rtifying 
that said candidate name is Icgitimatoly encrypted; and 

said encryption serv e r (400, 4 10, — 44 0) cr e ates, in addition to said 
encrypted voting data, certificate data for certifying legitimacy of said encrypted 
voting data, to return the sam e to said voter terminal (100, 110, 1 4 0). 

said voter terminal includes an intra-organization-signature creation means 

for creating an intra-organizatiou digital signature based on said encrypted voting 
data, intra-organization identification data, and a private kev, 

said authentication server receives said encrypted voting data, said intra- 
organization identification data, and said intra-organization digital signature 
from said voter terminal, to certify said intra-organization digital signature based 
on a public kev: and 

said voting server acknowledges at least said encrypted voting data 
affixed with certificate data by said authentication server as said effective 
encrypted voting data. 

7. (Currently Amended) An anonymous electronic voting system comprising: 
voter terminals (100, 110, 1 4 0) connected to a network; 
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a first encryption server (200) including a first data conversion means 
(206) for creating a first encryption parameter for each of said voter terminals 
(100, 110, 1 4 0) from public information, and transmitting said first parameter to 
said voter terminals (100, 110, 110);i 

a second encryption server ( 1 00, 4 10, 4 4 0) including a second data 
conversion means (105, 4 15, 44 5) for creating a second encryption parameter, 
and transmitting said second parameter to said voter terminals (100, 110, 1 4 0); ; 

a voting server (200) for receiving encrypted voting data from said voter 
terminals (100, 1 10, 1 4 0) to create a list of effective encrypted voting data from 
among said received encrypted voting data, and transmitting said created list of 
said effective encrypted voting data via said network; and 

a decryption server (500) for decrypting said list of said effective 
encrypted voting data received from said voting server (200) , to create and 
transmit via said network a list of plaintext candidate names rearranged from said 
list of said effective encrypted voting data, wherein: 

names from said decryption server-f^O^, to tally voted results based on 
said list of said received candidate names; and 

said voter terminals (100, 1 10, 1 4 0) each include an encryption means 
(10 4 , 11 4 , 1 44 ) for encrypting voting contents based on said first and second 
encryption parameters to create encrypted voting data, and transmits said 
encrypted voting data to said voting server (200), 
8 - 9. (Canceled) 

10. (Currently Amended) The anonymous electronic voting system according 
to any one of claims claim 7 to 9, further comprising an auth e ntication , wherein 
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said first encryption server (300) including and said votia<^ server operate on a 
storage device for storing a list of identification data of voters or voter torminals 
included in a voter list, said authentication server (300) receiving said encrypted 
voting data and identification data from said vot e r terminals (100, 110, 120, 130) 
to certify said encrypted voting data based on said identification data stored in 
said storage device, wherein said voting common server (200) acknowledges at 
l«as< — said — encrypt e d — voting — data — affix e d — with — c e rtificate data — by — said: 
authentication server as said effective encrypted voting data . 

11. (Currently Amended) The anonymous electronic voting system 
according to any one of claims c laim 7 to 9, furth e r comprising an auth e ntication 
server (300) , wherein: 

said — vot e r terminals — (110) — eaefe — include — an — intra organization 

signature creation means (113) for said voter terminals create, in addition to said 
encrypted voting data, encryption-certificate data, and transmits the same to said 
voting server: 

said voting server, upon completing verification of legitimacy by 
verifying at least said encryption-certificate data, acknowledges corresponding 
said encrypted voting data as said effective encrypted voting data. 

12. (Currently Amended) An anonymous electronic voting method using a 
voting server, a voter terminal for voting therethrough by a voter, an encryption 
server, and a decryption server, said comprising the steps of: 

transmitting from said voting server (200) a list of combinations of 
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candidate name and encrypted candidate name obtained by encrypting said 
candidate name to said voter terminal (100, 110, 140) v ia a network; 

transmitting from said voter terminal (100, — 110, 10) an encrypted 
candidate name, which is paired with a candidate name selected by a voter, to 
said encryption server (100, 4 10, 44 0);i 

re-encrypting said encrypted candidate name in said encryption server 
( 1 00, 1 10, 44 0) to create encrypted voting data, and transmitting said encrypted 
voting data to said voter terminal (100, 110, 140) having transmitted said 
encrypted candidate name; 

transmitting from said voter terminal (100, 110, 1 4 0) said encrypted voting 
data, which is received from said encryption server ( 1 00, 4 10, 44 ) , to said voting 
server (200) ; 

receiving said encrypted voting data in said voting server (200) to create 
and transmit a list of effective encrypted voting data; 

decrypting said list of said encrypted voting data in said decryption server 
(500) to create a list of plaintext candidate names rearranged; and 

receiving said list of said plaintext candidate names in said voting server 
(200) to tally vote results based on said list of said received candidate names. 

13. (Currently amended) The anonymous electronic voting method according 
to claim 12, further comprising the steps of: 

receiving from said voter terminal (100) said encrypted voting data and 
identification data in an authentication server (300) to certify said encrypted 
voting data based on identification data stored in a storage device and 
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transmitting said encrypted voting data; and 

acknowledging in said voting server (200) at least said encrypted voting 
data affixed with certificate data by said authentication server (300) as said 
effective encrypted voting data. 

14. (Currently Amended) The anonymous electronic voting method according 
to claim 12, further comprising the steps of: 

creating in said voter terminal (1 10) — an — intra organization signature 
cr e ation means (113, 133) for an intra-organization digital signature based on 
said encrypted voting data, intra-organization identification data, and a private 
key; 

receiving in said authentication server said encryption voting data, intra- 
organization identification server and intra-organization digital signature from 
said voter terminal; 

acknowledging in said voting server (200) at least said encrypted voting 
data affixed with certificate data by said authentication server (300) as said 
effective encrypted voting data. 

15. (Currently Amended) The anonymous electronic voting method according 
to claim 12, wherein said step of re-encrypting said encrypted candidate name is 
the step of consecutively multiple-encrypting said encrypted candidate name in a 
group of encryption servers (400 1 to 4 00 k, 4 10 1 to 1 10 k, 1^ 0 1 to 44 0 Ic) , 



16. (Currently Amended) The anonymous electronic voting method according 
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to claim 12, wherein: 

each of said combinations in said list includes, in addition to said 
candidate name and said encrypted candidate name, certificate data for certifying 
that said candidate name is legitimately encrypted; and 

said encryption server (400, 4 10, 4 40) creates, in addition to said 
encrypted voting data, certificate data for certifying legitimacy of said encrypted 
voting data, to return the same to said voter terminal (100, 110, 1 4 0) . 

17. (Currently Amended) An anonymous electronic voting method comprising 
the steps of: 

creating in a first encryption server (200) a first encryption parameter for 
each of voter terminals (100, 110, 1 4 0) from public information, and transmitting 
said first parameter to said voter terminals (100, 110, 1 4 0);i 

creating in a second encryption server ( 4 00, 4 10, 44 0) a second encryption 
parameter for each of said voter terminals (100, 110, 1 4 0) from said public 
information, and transmitting said second parameter to said voter terminals-ftOO^ 
110, 1 4 0);i 

encrypting voting contents of a voter in said voter terminal (1 00, 110, 140) 
based on said first and second encryption parameters to create encrypted voting 
data, and transmitting said encrypted voting data to said voting server (200);i 

creating a list of effective encrypted voting data from among said 
received encrypted voting data in said voting server (200) , and transmitting said 
created list of said effective encrypted voting data via said network; 

decrypting in a decryption server (500) said list of said effective 
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encrypted voting data received from said voting server (200) , to create and 
transmit via said network a list of plaintext candidate names rearranged from said 
list of said effective encrypted voting data; and 

receiving in said voting server (200) said plaintext candidate names, to 
tally voted results based on said list of said received candidate names. 

18. (Currently Amended) The anonymous electronic voting method according 
to claim 17, wherein said encryption voting data creating step creates encryption- 
certificate data certifying legitimacy of said encrypted voting data, further 
comprising the step: 

after verifying legitimacy in said voting server (200) by verifying at least 
said encryption-certificate data, acknowledging corresponding said encrypted 
voting data as said effective encrypted voting data. 

19. (Currently Amended) The anonymous electronic voting method according 
to claim 17, further comprising the steps of: receiving in a certification server 
(300) said encrypted voting data and identification data from said voter terminal 
(1 00) , and certifying said encrypted voting data based on identification data 
stored in a storage device; and acknowledging in said voting server (200) at least 
said encrypted voting data affixed with said certificate data as said effective 
voting data. 

20. (Currently Amended) The anonymous electronic voting method according 
to claim 17, further comprising the steps of: 
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creating in said voter terminal (110) — an intra-organization digital 
signature based on said encrypted voting data, intra-organization identification 
data, and a private key; 

receiving in said authentication server (300) said encrypted voting data, 
said intra-organization identification data, and said intra-organization digital 
signature from said voter terminal-(-H-0>, to certify said intra-organization digital 
signature based on a public key; and 

acknowledging in said voting server (200) at least said encrypted voting 
data affixed with certificate data by said authentication server as said effective 
encrypted voting data. 

21. (New) The anonymous electronic voting method according to claim 7, 
wherein said at least one second encryption server include a group of second 
encryption servers, and said voter terminals each include an encryption means for 
multiple-encrypting said voting contents based on said first parameter and said 
second parameters transmitted from said group of second encryption servers to 
create said encrypted voting data and transmit said encrypted voting data to said 
voting server. 

22. (New) The anonymous voting method according to claim 17, wherein said 
creating of said second parameter includes creating a plurality of said second 
parameter in a group of second encryption servers, and said encrypting of said 
voting contents includes multiple-encrypting said voting contents based on said 
first parameter and a plurality of said second parameters. 

DCX:SNY-206555v01 



23. (New)The anonymous electronic voting system according to 1 further 
comprising an authentication server including a storage device for storing a list 
of identification data of voters or voter terminals included in a voter list, said 
authentication server receiving said encrypted voting data and identification data 
from said voter terminal to certify said encrypted voting data based on said 
identification data stored in said storage device, wherein said voting server 
acknowledges at least said encrypted voting data affixed with certificate data by 
said authentication server as said effective encrypted voting data. 

24, (New) The anonymous electronic voting system according to any claim 1, 
wherein said at least one encryption server include a group of encryption servers 
for consecutively multiple-encrypting said encrypted candidate name, and said 
voting server receives said encrypted voting data multiple-encrypted by said 
group of said encryption servers. 

25 (New) The anonymous electronic voting system according to claim 1, 
wherein: 

each of said combinations in said list includes, in addition to said 
candidate name and said encrypted candidate name, certificate data for certifying 
that said candidate name is legitimately encrypted; and 

said encryption server creates, in addition to said encrypted voting data, 
certificate data for certifying legitimacy of said encrypted voting data, to return 
the same to said voter terminal. 
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26. (New) The anonymous electronic voting system according to claim 7, 
further comprising an authentication server including a storage device for storing 
a list of identification data of voters or voter terminals included in a voter list, 
said authentication server receiving said encrypted voting data and identification 
data from said voter terminals to certify said encrypted voting data based on said 
identification data stored in said storage device, wherein said voting server 
acknowledges at least said encrypted voting data affixed with certificate data by 
said authentication server as said effective encrypted voting data. 

27. (New). The anonymous electronic voting system according to claim 7, 
further comprising an authentication server, wherein: 

said voter terminals each include an intra-organization-signature creation 
means for creating an intra-organization digital signature based on said encrypted 
voting data, intra-organization identification data, and a private key, 

said authentication server receives said encrypted voting data, said intra- 
organization identification data, and said intra-organization digital signature 
from said voter terminal, to certify said intra-organization digital signature based 
on a public key; and 

said voting server acknowledges at least said encrypted voting data affixed with 
certificate data by said authentication server as said effective encrypted voting 
data. 
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